CVE-1999-0768
CVSS 2.0 Score 7.5 of 10 (high)
Details
Summary
CVE-1999-0768 is a buffer overflow vulnerability that affects Vixie Cron, a cron daemon used for scheduling tasks in Red Hat systems. This issue is triggered when the MAILTO environmental variable is maliciously crafted and passed to the Vixie Cron daemon. The buffer overflow can lead to arbitrary code execution with the privileges of the cron daemon, potentially allowing an attacker to gain root access to the system. This vulnerability was discovered in 1999 and affected many Red Hat systems at that time. System administrators were advised to update their Cron packages or configure the MAILTO variable securely to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SUSE Linux Enterprise Server
- Red Hat Enterprise Linux
Affected Vendors
- Red Hat
- SUSE Linux GmbH